Analysis
-
max time kernel
148s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2025 08:09
Behavioral task
behavioral1
Sample
173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe
Resource
win10v2004-20250217-en
General
-
Target
173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe
-
Size
482KB
-
MD5
5700b3c532943c2b10dea3474835257e
-
SHA1
7d6a237921a06d192da7b84b2f2819509832f162
-
SHA256
c65552b8cbe547b195d828dc0ac13363fad6ca9f3583b5549d24371c766bf053
-
SHA512
8a5db0bfb3c90506b0f7807dc648c6cf43b944997c9ace1a86b4ec1845558cb9ea8d0cb21dec7e7998fbf3b50321953f2447502972fd8c76b36e7ab9a5cae925
-
SSDEEP
12288:p13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQnTS:7ak/mBXTV/R0nEF76gFZI
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe"C:\Users\Admin\AppData\Local\Temp\173986614433429347fbc395e0b15beade8a17bfe0c03418b6cec2e1b4ee6e279450f8c171670.dat-decoded.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1424